Warning: Permanently added '[localhost]:1854' (ECDSA) to the list of known hosts.
2025/11/27 08:32:32 fuzzer started
2025/11/27 08:32:32 dialing manager at localhost:36809
syzkaller login: [   45.841148] cgroup: Unknown subsys name 'net'
[   45.927027] cgroup: Unknown subsys name 'cpuset'
[   45.940422] cgroup: Unknown subsys name 'rlimit'
2025/11/27 08:32:44 syscalls: 2214
2025/11/27 08:32:44 code coverage: enabled
2025/11/27 08:32:44 comparison tracing: enabled
2025/11/27 08:32:44 extra coverage: enabled
2025/11/27 08:32:44 setuid sandbox: enabled
2025/11/27 08:32:44 namespace sandbox: enabled
2025/11/27 08:32:44 Android sandbox: enabled
2025/11/27 08:32:44 fault injection: enabled
2025/11/27 08:32:44 leak checking: enabled
2025/11/27 08:32:44 net packet injection: enabled
2025/11/27 08:32:44 net device setup: enabled
2025/11/27 08:32:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/11/27 08:32:44 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/11/27 08:32:44 USB emulation: enabled
2025/11/27 08:32:44 hci packet injection: enabled
2025/11/27 08:32:44 wifi device emulation: enabled
2025/11/27 08:32:44 802.15.4 emulation: enabled
2025/11/27 08:32:44 fetching corpus: 0, signal 0/2000 (executing program)
2025/11/27 08:32:44 fetching corpus: 43, signal 19550/23192 (executing program)
2025/11/27 08:32:45 fetching corpus: 92, signal 32875/37978 (executing program)
2025/11/27 08:32:45 fetching corpus: 142, signal 38018/44592 (executing program)
2025/11/27 08:32:45 fetching corpus: 192, signal 43078/51107 (executing program)
2025/11/27 08:32:45 fetching corpus: 242, signal 49501/58808 (executing program)
2025/11/27 08:32:45 fetching corpus: 292, signal 54059/64657 (executing program)
2025/11/27 08:32:45 fetching corpus: 342, signal 58427/70219 (executing program)
2025/11/27 08:32:45 fetching corpus: 391, signal 64736/77495 (executing program)
2025/11/27 08:32:45 fetching corpus: 441, signal 68338/82179 (executing program)
2025/11/27 08:32:45 fetching corpus: 491, signal 70708/85665 (executing program)
2025/11/27 08:32:45 fetching corpus: 540, signal 72620/88720 (executing program)
2025/11/27 08:32:45 fetching corpus: 590, signal 76619/93620 (executing program)
2025/11/27 08:32:45 fetching corpus: 640, signal 82210/99813 (executing program)
2025/11/27 08:32:46 fetching corpus: 689, signal 84916/103396 (executing program)
2025/11/27 08:32:46 fetching corpus: 739, signal 87494/106816 (executing program)
2025/11/27 08:32:46 fetching corpus: 789, signal 89828/110011 (executing program)
2025/11/27 08:32:46 fetching corpus: 839, signal 93341/114164 (executing program)
2025/11/27 08:32:46 fetching corpus: 887, signal 95247/116924 (executing program)
2025/11/27 08:32:46 fetching corpus: 937, signal 97256/119738 (executing program)
2025/11/27 08:32:46 fetching corpus: 987, signal 99583/122712 (executing program)
2025/11/27 08:32:46 fetching corpus: 1037, signal 102187/125863 (executing program)
2025/11/27 08:32:47 fetching corpus: 1087, signal 104477/128729 (executing program)
2025/11/27 08:32:47 fetching corpus: 1136, signal 106407/131235 (executing program)
2025/11/27 08:32:47 fetching corpus: 1185, signal 108351/133763 (executing program)
2025/11/27 08:32:47 fetching corpus: 1235, signal 110402/136318 (executing program)
2025/11/27 08:32:47 fetching corpus: 1285, signal 111768/138387 (executing program)
2025/11/27 08:32:47 fetching corpus: 1335, signal 113082/140351 (executing program)
2025/11/27 08:32:47 fetching corpus: 1385, signal 114570/142434 (executing program)
2025/11/27 08:32:47 fetching corpus: 1434, signal 115569/144114 (executing program)
2025/11/27 08:32:47 fetching corpus: 1484, signal 116811/145939 (executing program)
2025/11/27 08:32:47 fetching corpus: 1534, signal 117836/147581 (executing program)
2025/11/27 08:32:47 fetching corpus: 1584, signal 119316/149592 (executing program)
2025/11/27 08:32:48 fetching corpus: 1634, signal 120366/151271 (executing program)
2025/11/27 08:32:48 fetching corpus: 1684, signal 121417/152913 (executing program)
2025/11/27 08:32:48 fetching corpus: 1734, signal 122525/154549 (executing program)
2025/11/27 08:32:48 fetching corpus: 1784, signal 123579/156177 (executing program)
2025/11/27 08:32:48 fetching corpus: 1834, signal 124731/157863 (executing program)
2025/11/27 08:32:48 fetching corpus: 1884, signal 125705/159397 (executing program)
2025/11/27 08:32:48 fetching corpus: 1934, signal 126693/160886 (executing program)
2025/11/27 08:32:48 fetching corpus: 1984, signal 127680/162338 (executing program)
2025/11/27 08:32:48 fetching corpus: 2034, signal 129119/164076 (executing program)
2025/11/27 08:32:48 fetching corpus: 2083, signal 129863/165367 (executing program)
2025/11/27 08:32:48 fetching corpus: 2133, signal 131457/167159 (executing program)
2025/11/27 08:32:49 fetching corpus: 2183, signal 132796/168790 (executing program)
2025/11/27 08:32:49 fetching corpus: 2233, signal 133425/169987 (executing program)
2025/11/27 08:32:49 fetching corpus: 2283, signal 134322/171291 (executing program)
2025/11/27 08:32:49 fetching corpus: 2333, signal 135160/172578 (executing program)
2025/11/27 08:32:49 fetching corpus: 2383, signal 136086/173855 (executing program)
2025/11/27 08:32:49 fetching corpus: 2433, signal 136609/174906 (executing program)
2025/11/27 08:32:49 fetching corpus: 2483, signal 137374/176133 (executing program)
2025/11/27 08:32:49 fetching corpus: 2532, signal 138098/177252 (executing program)
2025/11/27 08:32:49 fetching corpus: 2582, signal 139019/178454 (executing program)
2025/11/27 08:32:49 fetching corpus: 2632, signal 140059/179733 (executing program)
2025/11/27 08:32:50 fetching corpus: 2681, signal 141005/180969 (executing program)
2025/11/27 08:32:50 fetching corpus: 2730, signal 141596/181972 (executing program)
2025/11/27 08:32:50 fetching corpus: 2780, signal 142469/183113 (executing program)
2025/11/27 08:32:50 fetching corpus: 2830, signal 142983/184050 (executing program)
2025/11/27 08:32:50 fetching corpus: 2880, signal 143890/185190 (executing program)
2025/11/27 08:32:50 fetching corpus: 2930, signal 144526/186205 (executing program)
2025/11/27 08:32:50 fetching corpus: 2980, signal 145110/187180 (executing program)
2025/11/27 08:32:50 fetching corpus: 3030, signal 145911/188168 (executing program)
2025/11/27 08:32:50 fetching corpus: 3080, signal 146581/189099 (executing program)
2025/11/27 08:32:50 fetching corpus: 3130, signal 147340/190041 (executing program)
2025/11/27 08:32:50 fetching corpus: 3180, signal 148291/191143 (executing program)
2025/11/27 08:32:51 fetching corpus: 3230, signal 148879/192035 (executing program)
2025/11/27 08:32:51 fetching corpus: 3280, signal 149299/192847 (executing program)
2025/11/27 08:32:51 fetching corpus: 3330, signal 149798/193668 (executing program)
2025/11/27 08:32:51 fetching corpus: 3380, signal 151006/194753 (executing program)
2025/11/27 08:32:51 fetching corpus: 3430, signal 151704/195667 (executing program)
2025/11/27 08:32:51 fetching corpus: 3480, signal 152400/196580 (executing program)
2025/11/27 08:32:51 fetching corpus: 3530, signal 153033/197469 (executing program)
2025/11/27 08:32:51 fetching corpus: 3580, signal 153692/198347 (executing program)
2025/11/27 08:32:51 fetching corpus: 3630, signal 154340/199164 (executing program)
2025/11/27 08:32:51 fetching corpus: 3680, signal 156748/200556 (executing program)
2025/11/27 08:32:51 fetching corpus: 3730, signal 157344/201316 (executing program)
2025/11/27 08:32:52 fetching corpus: 3780, signal 158067/202097 (executing program)
2025/11/27 08:32:52 fetching corpus: 3830, signal 158727/202859 (executing program)
2025/11/27 08:32:52 fetching corpus: 3879, signal 159675/203697 (executing program)
2025/11/27 08:32:52 fetching corpus: 3929, signal 160211/204414 (executing program)
2025/11/27 08:32:52 fetching corpus: 3978, signal 160744/205133 (executing program)
2025/11/27 08:32:52 fetching corpus: 4028, signal 161297/205845 (executing program)
2025/11/27 08:32:52 fetching corpus: 4077, signal 161700/206509 (executing program)
2025/11/27 08:32:52 fetching corpus: 4127, signal 162208/207168 (executing program)
2025/11/27 08:32:52 fetching corpus: 4177, signal 163142/207944 (executing program)
2025/11/27 08:32:52 fetching corpus: 4227, signal 163931/208640 (executing program)
2025/11/27 08:32:52 fetching corpus: 4277, signal 164393/209241 (executing program)
2025/11/27 08:32:52 fetching corpus: 4327, signal 165308/209964 (executing program)
2025/11/27 08:32:53 fetching corpus: 4377, signal 166038/210583 (executing program)
2025/11/27 08:32:53 fetching corpus: 4427, signal 166474/211210 (executing program)
2025/11/27 08:32:53 fetching corpus: 4477, signal 167056/211808 (executing program)
2025/11/27 08:32:53 fetching corpus: 4527, signal 167753/212415 (executing program)
2025/11/27 08:32:53 fetching corpus: 4577, signal 168108/212967 (executing program)
2025/11/27 08:32:53 fetching corpus: 4627, signal 168841/213549 (executing program)
2025/11/27 08:32:53 fetching corpus: 4677, signal 169325/214103 (executing program)
2025/11/27 08:32:53 fetching corpus: 4727, signal 169560/214618 (executing program)
2025/11/27 08:32:53 fetching corpus: 4777, signal 170054/215170 (executing program)
2025/11/27 08:32:53 fetching corpus: 4827, signal 170494/215687 (executing program)
2025/11/27 08:32:54 fetching corpus: 4877, signal 170871/216192 (executing program)
2025/11/27 08:32:54 fetching corpus: 4927, signal 171329/216735 (executing program)
2025/11/27 08:32:54 fetching corpus: 4977, signal 171644/217187 (executing program)
2025/11/27 08:32:54 fetching corpus: 5027, signal 172098/217672 (executing program)
2025/11/27 08:32:54 fetching corpus: 5077, signal 172640/218155 (executing program)
2025/11/27 08:32:54 fetching corpus: 5126, signal 173160/218681 (executing program)
2025/11/27 08:32:54 fetching corpus: 5176, signal 173498/219152 (executing program)
2025/11/27 08:32:54 fetching corpus: 5226, signal 173834/219630 (executing program)
2025/11/27 08:32:54 fetching corpus: 5275, signal 174512/220130 (executing program)
2025/11/27 08:32:54 fetching corpus: 5325, signal 175090/220589 (executing program)
2025/11/27 08:32:55 fetching corpus: 5375, signal 175499/221035 (executing program)
2025/11/27 08:32:55 fetching corpus: 5423, signal 176054/221450 (executing program)
2025/11/27 08:32:55 fetching corpus: 5473, signal 176496/221853 (executing program)
2025/11/27 08:32:55 fetching corpus: 5523, signal 176917/221854 (executing program)
2025/11/27 08:32:55 fetching corpus: 5573, signal 177346/221854 (executing program)
2025/11/27 08:32:55 fetching corpus: 5623, signal 177698/221854 (executing program)
2025/11/27 08:32:55 fetching corpus: 5673, signal 178148/221854 (executing program)
2025/11/27 08:32:55 fetching corpus: 5723, signal 178844/221869 (executing program)
2025/11/27 08:32:55 fetching corpus: 5773, signal 179252/221869 (executing program)
2025/11/27 08:32:55 fetching corpus: 5823, signal 179575/221869 (executing program)
2025/11/27 08:32:55 fetching corpus: 5873, signal 179946/221869 (executing program)
2025/11/27 08:32:56 fetching corpus: 5923, signal 180532/221870 (executing program)
2025/11/27 08:32:56 fetching corpus: 5973, signal 180963/221870 (executing program)
2025/11/27 08:32:56 fetching corpus: 6023, signal 181370/221870 (executing program)
2025/11/27 08:32:56 fetching corpus: 6073, signal 181895/221870 (executing program)
2025/11/27 08:32:56 fetching corpus: 6122, signal 182290/221870 (executing program)
2025/11/27 08:32:56 fetching corpus: 6172, signal 182683/221870 (executing program)
2025/11/27 08:32:56 fetching corpus: 6222, signal 183033/221870 (executing program)
2025/11/27 08:32:56 fetching corpus: 6272, signal 183460/221870 (executing program)
2025/11/27 08:32:56 fetching corpus: 6322, signal 183779/221885 (executing program)
2025/11/27 08:32:56 fetching corpus: 6372, signal 184166/221885 (executing program)
2025/11/27 08:32:57 fetching corpus: 6422, signal 184453/221885 (executing program)
2025/11/27 08:32:57 fetching corpus: 6472, signal 184773/221885 (executing program)
2025/11/27 08:32:57 fetching corpus: 6522, signal 185073/221887 (executing program)
2025/11/27 08:32:57 fetching corpus: 6572, signal 185541/221887 (executing program)
2025/11/27 08:32:57 fetching corpus: 6622, signal 186014/221889 (executing program)
2025/11/27 08:32:57 fetching corpus: 6672, signal 186339/221908 (executing program)
2025/11/27 08:32:57 fetching corpus: 6722, signal 186684/221908 (executing program)
2025/11/27 08:32:57 fetching corpus: 6772, signal 186988/221908 (executing program)
2025/11/27 08:32:57 fetching corpus: 6822, signal 187407/221908 (executing program)
2025/11/27 08:32:57 fetching corpus: 6872, signal 187682/221908 (executing program)
2025/11/27 08:32:57 fetching corpus: 6922, signal 188144/221908 (executing program)
2025/11/27 08:32:58 fetching corpus: 6972, signal 188455/221908 (executing program)
2025/11/27 08:32:58 fetching corpus: 7022, signal 188706/221908 (executing program)
2025/11/27 08:32:58 fetching corpus: 7072, signal 189092/221912 (executing program)
2025/11/27 08:32:58 fetching corpus: 7122, signal 189301/221918 (executing program)
2025/11/27 08:32:58 fetching corpus: 7172, signal 189542/221918 (executing program)
2025/11/27 08:32:58 fetching corpus: 7222, signal 189886/221918 (executing program)
2025/11/27 08:32:58 fetching corpus: 7272, signal 190192/221922 (executing program)
2025/11/27 08:32:58 fetching corpus: 7322, signal 190423/221922 (executing program)
2025/11/27 08:32:58 fetching corpus: 7372, signal 190732/221922 (executing program)
2025/11/27 08:32:59 fetching corpus: 7422, signal 190927/221922 (executing program)
2025/11/27 08:32:59 fetching corpus: 7472, signal 191271/221922 (executing program)
2025/11/27 08:32:59 fetching corpus: 7521, signal 191668/221922 (executing program)
2025/11/27 08:32:59 fetching corpus: 7571, signal 191967/221929 (executing program)
2025/11/27 08:32:59 fetching corpus: 7620, signal 192245/221929 (executing program)
2025/11/27 08:32:59 fetching corpus: 7669, signal 192539/221935 (executing program)
2025/11/27 08:32:59 fetching corpus: 7719, signal 192777/221957 (executing program)
2025/11/27 08:32:59 fetching corpus: 7769, signal 193088/221957 (executing program)
2025/11/27 08:32:59 fetching corpus: 7817, signal 193409/221957 (executing program)
2025/11/27 08:32:59 fetching corpus: 7867, signal 193698/221957 (executing program)
2025/11/27 08:32:59 fetching corpus: 7917, signal 194008/222015 (executing program)
2025/11/27 08:33:00 fetching corpus: 7967, signal 194336/222015 (executing program)
2025/11/27 08:33:00 fetching corpus: 8017, signal 194644/222015 (executing program)
2025/11/27 08:33:00 fetching corpus: 8067, signal 194793/222015 (executing program)
2025/11/27 08:33:00 fetching corpus: 8117, signal 195115/222015 (executing program)
2025/11/27 08:33:00 fetching corpus: 8167, signal 195343/222015 (executing program)
2025/11/27 08:33:00 fetching corpus: 8217, signal 195587/222015 (executing program)
2025/11/27 08:33:00 fetching corpus: 8267, signal 195904/222017 (executing program)
2025/11/27 08:33:00 fetching corpus: 8317, signal 196230/222031 (executing program)
2025/11/27 08:33:00 fetching corpus: 8367, signal 196519/222031 (executing program)
2025/11/27 08:33:00 fetching corpus: 8417, signal 196759/222033 (executing program)
2025/11/27 08:33:00 fetching corpus: 8467, signal 197022/222041 (executing program)
2025/11/27 08:33:00 fetching corpus: 8517, signal 197347/222041 (executing program)
2025/11/27 08:33:01 fetching corpus: 8567, signal 197753/222041 (executing program)
2025/11/27 08:33:01 fetching corpus: 8617, signal 198175/222041 (executing program)
2025/11/27 08:33:01 fetching corpus: 8667, signal 198508/222041 (executing program)
2025/11/27 08:33:01 fetching corpus: 8717, signal 198806/222057 (executing program)
2025/11/27 08:33:01 fetching corpus: 8767, signal 199011/222065 (executing program)
2025/11/27 08:33:01 fetching corpus: 8817, signal 199255/222065 (executing program)
2025/11/27 08:33:01 fetching corpus: 8866, signal 199469/222070 (executing program)
2025/11/27 08:33:01 fetching corpus: 8916, signal 199747/222090 (executing program)
2025/11/27 08:33:01 fetching corpus: 8966, signal 200136/222090 (executing program)
2025/11/27 08:33:02 fetching corpus: 9015, signal 200353/222090 (executing program)
2025/11/27 08:33:02 fetching corpus: 9065, signal 200614/222093 (executing program)
2025/11/27 08:33:02 fetching corpus: 9115, signal 200803/222093 (executing program)
2025/11/27 08:33:02 fetching corpus: 9165, signal 201026/222126 (executing program)
2025/11/27 08:33:02 fetching corpus: 9215, signal 201367/222126 (executing program)
2025/11/27 08:33:02 fetching corpus: 9265, signal 201548/222126 (executing program)
2025/11/27 08:33:02 fetching corpus: 9315, signal 201755/222126 (executing program)
2025/11/27 08:33:02 fetching corpus: 9365, signal 202174/222126 (executing program)
2025/11/27 08:33:02 fetching corpus: 9415, signal 202521/222127 (executing program)
2025/11/27 08:33:02 fetching corpus: 9465, signal 202797/222127 (executing program)
2025/11/27 08:33:02 fetching corpus: 9515, signal 203118/222127 (executing program)
2025/11/27 08:33:03 fetching corpus: 9564, signal 203325/222131 (executing program)
2025/11/27 08:33:03 fetching corpus: 9614, signal 203570/222137 (executing program)
2025/11/27 08:33:03 fetching corpus: 9663, signal 203853/222137 (executing program)
2025/11/27 08:33:03 fetching corpus: 9713, signal 204083/222137 (executing program)
2025/11/27 08:33:03 fetching corpus: 9763, signal 204248/222137 (executing program)
2025/11/27 08:33:03 fetching corpus: 9813, signal 204947/222140 (executing program)
2025/11/27 08:33:03 fetching corpus: 9863, signal 205180/222155 (executing program)
2025/11/27 08:33:03 fetching corpus: 9912, signal 205486/222155 (executing program)
2025/11/27 08:33:03 fetching corpus: 9962, signal 205694/222165 (executing program)
2025/11/27 08:33:03 fetching corpus: 10012, signal 206032/222166 (executing program)
2025/11/27 08:33:03 fetching corpus: 10062, signal 206209/222167 (executing program)
2025/11/27 08:33:04 fetching corpus: 10112, signal 206494/222167 (executing program)
2025/11/27 08:33:04 fetching corpus: 10162, signal 206724/222167 (executing program)
2025/11/27 08:33:04 fetching corpus: 10211, signal 206965/222183 (executing program)
2025/11/27 08:33:04 fetching corpus: 10261, signal 207158/222183 (executing program)
2025/11/27 08:33:04 fetching corpus: 10311, signal 207465/222183 (executing program)
2025/11/27 08:33:04 fetching corpus: 10361, signal 207659/222183 (executing program)
2025/11/27 08:33:04 fetching corpus: 10411, signal 207848/222183 (executing program)
2025/11/27 08:33:04 fetching corpus: 10460, signal 208149/222209 (executing program)
2025/11/27 08:33:04 fetching corpus: 10510, signal 208417/222213 (executing program)
2025/11/27 08:33:04 fetching corpus: 10560, signal 208560/222213 (executing program)
2025/11/27 08:33:05 fetching corpus: 10610, signal 208795/222220 (executing program)
2025/11/27 08:33:05 fetching corpus: 10660, signal 208983/222220 (executing program)
2025/11/27 08:33:05 fetching corpus: 10710, signal 209247/222220 (executing program)
2025/11/27 08:33:05 fetching corpus: 10760, signal 209471/222220 (executing program)
2025/11/27 08:33:05 fetching corpus: 10810, signal 209777/222239 (executing program)
2025/11/27 08:33:05 fetching corpus: 10860, signal 210018/222239 (executing program)
2025/11/27 08:33:05 fetching corpus: 10909, signal 210186/222239 (executing program)
2025/11/27 08:33:05 fetching corpus: 10959, signal 210302/222239 (executing program)
2025/11/27 08:33:05 fetching corpus: 11009, signal 210621/222242 (executing program)
2025/11/27 08:33:05 fetching corpus: 11059, signal 210829/222242 (executing program)
2025/11/27 08:33:05 fetching corpus: 11109, signal 211043/222242 (executing program)
2025/11/27 08:33:05 fetching corpus: 11159, signal 211246/222242 (executing program)
2025/11/27 08:33:06 fetching corpus: 11209, signal 211495/222242 (executing program)
2025/11/27 08:33:06 fetching corpus: 11258, signal 211713/222242 (executing program)
2025/11/27 08:33:06 fetching corpus: 11308, signal 212003/222242 (executing program)
2025/11/27 08:33:06 fetching corpus: 11358, signal 212278/222242 (executing program)
2025/11/27 08:33:06 fetching corpus: 11408, signal 212468/222274 (executing program)
2025/11/27 08:33:06 fetching corpus: 11458, signal 212668/222274 (executing program)
2025/11/27 08:33:06 fetching corpus: 11508, signal 212862/222275 (executing program)
2025/11/27 08:33:06 fetching corpus: 11558, signal 213092/222275 (executing program)
2025/11/27 08:33:06 fetching corpus: 11608, signal 213272/222275 (executing program)
2025/11/27 08:33:07 fetching corpus: 11658, signal 213530/222275 (executing program)
2025/11/27 08:33:07 fetching corpus: 11708, signal 213800/222275 (executing program)
2025/11/27 08:33:07 fetching corpus: 11758, signal 213988/222283 (executing program)
2025/11/27 08:33:07 fetching corpus: 11808, signal 214123/222314 (executing program)
2025/11/27 08:33:07 fetching corpus: 11858, signal 214393/222314 (executing program)
2025/11/27 08:33:07 fetching corpus: 11908, signal 214645/222314 (executing program)
2025/11/27 08:33:07 fetching corpus: 11958, signal 214909/222314 (executing program)
2025/11/27 08:33:07 fetching corpus: 12008, signal 215108/222325 (executing program)
2025/11/27 08:33:07 fetching corpus: 12058, signal 215246/222325 (executing program)
2025/11/27 08:33:07 fetching corpus: 12107, signal 215436/222325 (executing program)
2025/11/27 08:33:08 fetching corpus: 12157, signal 215666/222380 (executing program)
2025/11/27 08:33:08 fetching corpus: 12207, signal 216048/222380 (executing program)
2025/11/27 08:33:08 fetching corpus: 12257, signal 216226/222380 (executing program)
2025/11/27 08:33:08 fetching corpus: 12307, signal 216471/222380 (executing program)
2025/11/27 08:33:08 fetching corpus: 12357, signal 216667/222380 (executing program)
2025/11/27 08:33:08 fetching corpus: 12407, signal 216984/222383 (executing program)
2025/11/27 08:33:08 fetching corpus: 12457, signal 217298/222392 (executing program)
2025/11/27 08:33:08 fetching corpus: 12506, signal 217550/222392 (executing program)
2025/11/27 08:33:08 fetching corpus: 12556, signal 217762/222397 (executing program)
2025/11/27 08:33:08 fetching corpus: 12606, signal 217945/222400 (executing program)
2025/11/27 08:33:09 fetching corpus: 12656, signal 218139/222402 (executing program)
2025/11/27 08:33:09 fetching corpus: 12706, signal 218358/222411 (executing program)
2025/11/27 08:33:09 fetching corpus: 12756, signal 218608/222432 (executing program)
2025/11/27 08:33:09 fetching corpus: 12806, signal 218775/222432 (executing program)
2025/11/27 08:33:09 fetching corpus: 12855, signal 218949/222434 (executing program)
2025/11/27 08:33:09 fetching corpus: 12905, signal 219175/222436 (executing program)
2025/11/27 08:33:09 fetching corpus: 12955, signal 219452/222450 (executing program)
2025/11/27 08:33:09 fetching corpus: 13005, signal 219645/222474 (executing program)
2025/11/27 08:33:09 fetching corpus: 13054, signal 219812/222474 (executing program)
2025/11/27 08:33:10 fetching corpus: 13104, signal 219996/222474 (executing program)
2025/11/27 08:33:10 fetching corpus: 13154, signal 220190/222476 (executing program)
2025/11/27 08:33:10 fetching corpus: 13204, signal 220363/222476 (executing program)
2025/11/27 08:33:10 fetching corpus: 13252, signal 220541/222502 (executing program)
2025/11/27 08:33:10 fetching corpus: 13302, signal 220775/222502 (executing program)
2025/11/27 08:33:10 fetching corpus: 13325, signal 220854/222502 (executing program)
2025/11/27 08:33:10 fetching corpus: 13325, signal 220854/222505 (executing program)
2025/11/27 08:33:10 fetching corpus: 13325, signal 220854/222505 (executing program)
2025/11/27 08:33:12 starting 8 fuzzer processes
08:33:12 executing program 0:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_script(r1, &(0x7f0000001480)=ANY=[], 0x1010)
splice(r2, 0x0, r0, 0x0, 0x801, 0x0)

08:33:12 executing program 1:
syz_io_uring_setup(0x0, &(0x7f0000002540), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0)
socketpair(0x29, 0x0, 0x0, &(0x7f0000002b80))

08:33:12 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='oom_adj\x00')
write$P9_RREAD(r0, &(0x7f0000000340)=ANY=[@ANYBLOB='0'], 0x30)
read(r0, 0x0, 0x0)

[   83.456070] audit: type=1400 audit(1764232392.075:7): avc:  denied  { execmem } for  pid=279 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
08:33:12 executing program 2:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40e8662e, &(0x7f0000000000)={0x16000})

08:33:12 executing program 7:
r0 = io_uring_setup(0xa94, &(0x7f0000001d80))
io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0)

08:33:12 executing program 3:
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x300, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001800)='stat\x00')
sendfile(r1, r0, 0x0, 0x6)

08:33:12 executing program 4:
r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0))
io_uring_register$IORING_REGISTER_PROBE(r0, 0xd, 0x0, 0x20)

08:33:12 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)={0x2c, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0x9, 0x1b, 0x0, 0x0, @str='&:@\'\x00'}]}]}, 0x2c}], 0x1}, 0x0)

[   84.593633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   84.596231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   84.598403] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   84.602273] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   84.605224] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   84.710490] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   84.721230] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   84.724554] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   84.726281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   84.729648] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   84.731500] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   84.732648] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   84.733180] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   84.736689] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   84.737548] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   84.738596] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   84.741651] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   84.741981] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   84.746124] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   84.749270] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   84.751157] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   84.754467] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   84.757057] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   84.766124] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   84.781507] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   84.793619] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   84.801059] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   84.813303] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   84.815146] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   84.816909] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   84.827976] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   84.831875] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   84.836108] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   84.838021] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   84.840490] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   84.845450] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   84.846560] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   84.852595] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   84.854119] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   84.870542] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   86.679327] Bluetooth: hci0: command tx timeout
[   86.808391] Bluetooth: hci2: command tx timeout
[   86.809062] Bluetooth: hci3: command tx timeout
[   86.809518] Bluetooth: hci1: command tx timeout
[   86.872009] Bluetooth: hci4: command tx timeout
[   86.936379] Bluetooth: hci6: command tx timeout
[   86.937188] Bluetooth: hci7: command tx timeout
[   86.937663] Bluetooth: hci5: command tx timeout
[   88.727844] Bluetooth: hci0: command tx timeout
[   88.856744] Bluetooth: hci1: command tx timeout
[   88.857208] Bluetooth: hci3: command tx timeout
[   88.857596] Bluetooth: hci2: command tx timeout
[   88.919779] Bluetooth: hci4: command tx timeout
[   88.983809] Bluetooth: hci6: command tx timeout
[   88.984272] Bluetooth: hci5: command tx timeout
[   88.984655] Bluetooth: hci7: command tx timeout
[   90.775741] Bluetooth: hci0: command tx timeout
[   90.902763] Bluetooth: hci3: command tx timeout
[   90.903203] Bluetooth: hci2: command tx timeout
[   90.903591] Bluetooth: hci1: command tx timeout
[   90.967761] Bluetooth: hci4: command tx timeout
[   91.031208] Bluetooth: hci6: command tx timeout
[   91.031624] Bluetooth: hci7: command tx timeout
[   91.032035] Bluetooth: hci5: command tx timeout
[   92.823850] Bluetooth: hci0: command tx timeout
[   92.950750] Bluetooth: hci3: command tx timeout
[   92.951213] Bluetooth: hci2: command tx timeout
[   92.951606] Bluetooth: hci1: command tx timeout
[   93.014737] Bluetooth: hci4: command tx timeout
[   93.079845] Bluetooth: hci7: command tx timeout
[   93.080264] Bluetooth: hci6: command tx timeout
[   93.080667] Bluetooth: hci5: command tx timeout
[  118.247847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.248506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.460377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.461051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.677000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.677628] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.927176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.927833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:33:47 executing program 1:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f80100200040000000000000000000800029e21b3bf153595a4b414c4c4552202046415431362020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8fffffff0ffffffffffffff00"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="f8fffffff0ffffffffffffff00"/32, 0x20, 0x400}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202010000ee870325132510000e870325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c453120202020202020000ee870325132510000e870325105000a00000041660069006c00650032000f00140000ffffffffffffffffffff0000ffffffff46494c453220202020202020000ee870325132510000e870325106002823000041660069006c0065002e000f00d263006f006c0064000000ffff0000ffffffff46494c457e312020434f4c20000ee870325132510000e8703251070064000000", 0x120, 0x600}, {&(0x7f0000010500)="2e2020202020202020202010000ee870325132510000e87032510300000000002e2e20202020202020202010000ee870325132510000e870325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202020000ee870325132510000e870325104001a040000", 0x80, 0x11400}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x21400}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0x31400}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x51400}], 0x0, &(0x7f0000010d00))

[  119.065430] loop1: detected capacity change from 0 to 1300
08:33:47 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000007fc0)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)={0x5, {{0x2, 0x0, @multicast1}}, 0x0, 0x1, [{{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x110)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000007fc0)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000000)={0x5, {{0x2, 0x0, @multicast1}}}, 0x90)

08:33:47 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f00000002c0), 0x4)

[  119.356795] netlink: 'syz-executor.6': attribute type 27 has an invalid length.
[  119.392903] audit: type=1400 audit(1764232428.011:8): avc:  denied  { open } for  pid=3810 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  119.400535] audit: type=1400 audit(1764232428.012:9): avc:  denied  { kernel } for  pid=3810 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
08:33:48 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)={0x2c, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0x9, 0x1b, 0x0, 0x0, @str='&:@\'\x00'}]}]}, 0x2c}], 0x1}, 0x0)

[  119.483202] netlink: 'syz-executor.6': attribute type 27 has an invalid length.
08:33:48 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x3, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}})

08:33:48 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)={0x2c, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0x9, 0x1b, 0x0, 0x0, @str='&:@\'\x00'}]}]}, 0x2c}], 0x1}, 0x0)

[  119.607813] netlink: 'syz-executor.6': attribute type 27 has an invalid length.
08:33:48 executing program 1:
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount(&(0x7f00000000c0)=@md0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='msdos\x00', 0x0, 0x0)

08:33:48 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)={0x2c, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0x9, 0x1b, 0x0, 0x0, @str='&:@\'\x00'}]}]}, 0x2c}], 0x1}, 0x0)

[  119.678468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.679145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.700886] netlink: 'syz-executor.6': attribute type 27 has an invalid length.
[  119.712537] /dev/md0: Can't lookup blockdev
[  119.803086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.803783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.912739] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.913350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.983087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.983682] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.016192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.016846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.106734] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.107348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.168386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.169068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.289875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.290505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.305285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.306211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.318850] syz-executor.5 (3895): /proc/3895/oom_adj is deprecated, please use /proc/3895/oom_score_adj instead.
[  120.378554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.379267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.588403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.589053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.608909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.609479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:33:49 executing program 0:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_script(r1, &(0x7f0000001480)=ANY=[], 0x1010)
splice(r2, 0x0, r0, 0x0, 0x801, 0x0)

08:33:49 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)

08:33:49 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010300000000000008e9240000000c000180080001"], 0x20}}, 0x0)

08:33:49 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='oom_adj\x00')
write$P9_RREAD(r0, &(0x7f0000000340)=ANY=[@ANYBLOB='0'], 0x30)
read(r0, 0x0, 0x0)

08:33:49 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
pread64(r0, 0x0, 0x0, 0x0)

08:33:49 executing program 3:
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x300, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001800)='stat\x00')
sendfile(r1, r0, 0x0, 0x6)

08:33:49 executing program 2:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40e8662e, &(0x7f0000000000)={0x16000})

08:33:49 executing program 4:
r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0))
io_uring_register$IORING_REGISTER_PROBE(r0, 0xd, 0x0, 0x20)

08:33:49 executing program 0:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_script(r1, &(0x7f0000001480)=ANY=[], 0x1010)
splice(r2, 0x0, r0, 0x0, 0x801, 0x0)

08:33:49 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)

08:33:49 executing program 3:
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x300, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001800)='stat\x00')
sendfile(r1, r0, 0x0, 0x6)

08:33:49 executing program 4:
r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0))
io_uring_register$IORING_REGISTER_PROBE(r0, 0xd, 0x0, 0x20)

08:33:49 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='oom_adj\x00')
write$P9_RREAD(r0, &(0x7f0000000340)=ANY=[@ANYBLOB='0'], 0x30)
read(r0, 0x0, 0x0)

08:33:49 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
pread64(r0, 0x0, 0x0, 0x0)

08:33:49 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010300000000000008e9240000000c000180080001"], 0x20}}, 0x0)

08:33:49 executing program 2:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40e8662e, &(0x7f0000000000)={0x16000})

08:33:49 executing program 0:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_script(r1, &(0x7f0000001480)=ANY=[], 0x1010)
splice(r2, 0x0, r0, 0x0, 0x801, 0x0)

08:33:49 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='oom_adj\x00')
write$P9_RREAD(r0, &(0x7f0000000340)=ANY=[@ANYBLOB='0'], 0x30)
read(r0, 0x0, 0x0)

08:33:49 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010300000000000008e9240000000c000180080001"], 0x20}}, 0x0)

08:33:49 executing program 3:
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x300, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001800)='stat\x00')
sendfile(r1, r0, 0x0, 0x6)

08:33:49 executing program 4:
r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0))
io_uring_register$IORING_REGISTER_PROBE(r0, 0xd, 0x0, 0x20)

08:33:49 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
pread64(r0, 0x0, 0x0, 0x0)

08:33:49 executing program 2:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40e8662e, &(0x7f0000000000)={0x16000})

08:33:49 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)

08:33:49 executing program 3:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000200000004f800002000400000000000000000000100000000000000020000000100060000000000000000000000000080002911f042f153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa5252614100"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="eb58906d6b66732e66617400028020000200000004f800002000400000000000000000000100000000000000020000000100060000000000000000000000000080002911f042f153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0, 0xc00}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4000}, {&(0x7f0000010600)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4200}, {&(0x7f0000010700)="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", 0x120, 0x4400}, {&(0x7f0000010900)="2e20202020202020202020100034e870325132510000e87032510300000000002e2e202020202020202020100034e870325132510000e870325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200034e870325132510000e870325104001a040000", 0x80, 0x14400}, {&(0x7f0000010a00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x24400}, {&(0x7f0000010f00)='syzkallers\x00'/32, 0x20, 0x34400}, {&(0x7f0000011000)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x54400}], 0x0, &(0x7f0000011100))

08:33:49 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010300000000000008e9240000000c000180080001"], 0x20}}, 0x0)

08:33:49 executing program 5:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000080)=0x3f, 0x4)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r1, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

08:33:49 executing program 4:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$SCSI_IOCTL_SYNC(r0, 0x4)

08:33:49 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
pread64(r0, 0x0, 0x0, 0x0)

08:33:49 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)

08:33:49 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x400448dd, &(0x7f0000000040)={0x0, 0x0, "d19869"})

08:33:49 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r1 = dup(r0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x1008, &(0x7f0000000000), 0x0, 0x4)

[  121.096843] loop3: detected capacity change from 0 to 1348
[  121.112190] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  121.116671] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO
08:33:49 executing program 6:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$unix(r1, &(0x7f0000001840)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r0, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003640)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0)

08:33:49 executing program 3:
sched_setscheduler(0x0, 0x5, &(0x7f0000000000))
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="cb", 0x1}], 0x1, 0x0, 0x0, 0x3)

08:33:49 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x24000000)
unshare(0x2c020600)
r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00\x00\x00\x00\x00\x00\x01\x00'/124, 0x80, 0x0, 0x0)
mq_timedreceive(r0, 0x0, 0x20000000000000, 0x0, 0x0)

08:33:49 executing program 5:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000002180)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8)
bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894)
shutdown(0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x404, @remote, 0x3b}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x4c890)
connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e21, 0x5, @private1, 0xfffffff9}, 0x1c)
shutdown(r0, 0x1)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

08:33:49 executing program 7:
r0 = gettid()
capset(&(0x7f0000000140)={0x20071026, r0}, &(0x7f0000000180))

08:33:49 executing program 4:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0)
r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa40024, &(0x7f0000000040)=ANY=[])
mknodat$loop(r0, &(0x7f0000000180)='./file0\x00', 0x6000, 0x1)

[  121.234541] capability: warning: `syz-executor.7' uses deprecated v2 capabilities in a way that may be insecure
[  121.266346] 
[  121.266541] ================================================
[  121.266995] WARNING: lock held when returning to user space!
[  121.267449] 6.18.0-rc7-next-20251127 #1 Not tainted
[  121.267855] ------------------------------------------------
[  121.268320] syz-executor.0/3991 is leaving the kernel with locks still held!
[  121.270295] 1 lock held by syz-executor.0/3991:
[  121.271138]  #0: ffff888015248188 (&sb->s_type->i_mutex_key#18/1){+.+.}-{4:4}, at: start_creating_noperm+0x84/0xd0
[  121.927244] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  123.158794] Bluetooth: hci0: command 0x0c1a tx timeout

VM DIAGNOSIS:
08:33:50  Registers:
info registers vcpu 0
RAX=0000000071581f78 RBX=00007f9424d06008 RCX=0000001b2d820000 RDX=0000001b2d823f18
RSI=ffffffff8120976c RDI=0000000071581f78 RBP=0000000000000001 RSP=00007ffd87f9b6d0
R8 =0000000071581f78 R9 =0000001b2d8232f4 R10=0000000000001f78 R11=0000000071581f7c
R12=000000000000990c R13=00007f9425096000 R14=ffffffff8120976c R15=00007f94250a1ff0
RIP=00007f9424f3cb3f RFL=00000206 [-----P-] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00005555648eb400 00000000 00000000
GS =0000 0000000000000000 00000000 00000000
LDT=0000 fffffe3b00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2d823000 CR3=0000000048ae5000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=7463656a6e695f31313230385f7a7973 XMM03=00007f94250757c800007f94250757c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=00000000000419c3 RCX=ffffffff819f4234 RDX=ffff88800fe68000
RSI=0000000000000000 RDI=0000000000000000 RBP=1ffff11003f91eb4 RSP=ffff88801fc8f598
R8 =0000000000000000 R9 =fffff9400020ce16 R10=0000000000000001 R11=0000000000000000
R12=80000000419c3007 R13=ffff88801d941c80 R14=00007fcca377f000 R15=0000000000000000
RIP=ffffffff81756838 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e547a000 00000000 00000000
LDT=0000 fffffe4400000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fcca2599718 CR3=0000000009ca6000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000